CVE-2013-1775

Published: 27 February 2013

sudo 1.6.0 through 1.7.10p6 and sudo 1.8.0 through 1.8.6p6 allows local users or physically proximate attackers to bypass intended time restrictions and retain privileges without re-authenticating by setting the system clock and sudo user timestamp to the epoch.

Priority

High

Status

Package Release Status
sudo
Launchpad, Ubuntu, Debian
Upstream
Released (1.7.10p7, 1.8.6p7)
Patches:
Upstream: http://www.sudo.ws/repos/sudo/rev/ddf399e3e306 (1.7)
Upstream: http://www.sudo.ws/repos/sudo/rev/ebd6cc75020f (1.8)